Can malware damage the files?

[khoshtipi]

Hi all,

When a computer is infected by malware, can that malware damage the non OS files or only damage the OS files? For example, someone may have thousands of various files in folders in drives of HDD, when his/her computer in infected by malware, is it possible that those personal files (such as music, picture, videos, ...) to be infected?

Thanks.

 

[crankypenguin]

I recall a few years ago there was malware that deleted certain file extensions such as .mp3 files. So to answer your question I would say yes, it can effect certain file types depending on the malware in question.

 

[gied]

These things are rare.
Files are infected by viruses ( aka file infectors) and not regular malware. They are less common, and they can infect .exe. .sys, .com, .dll, .pif files (most other files can't be launched thus are of no use for viruses).
There are specific ransomwares, that encrypt documents or images on disk.
There are ones that delete or corrupt files just for kick, but they are even more rare.
The most popular ones that are similar to ones you describe are trojans using double extensions : .jpg.exe or similar.

 

[Britton30]

Some nastier ones can disable any security program on a PC so it can't detect the infection. In Control panel/Folder options/ View I uncheck "Hide extensions for know files trype" then the double extension like gied mentioned, ex: jpg.exe will be seen.

 

[khoshtipi]

These things are rare.
Files are infected by viruses ( aka file infectors) and not regular malware. They are less common, and they can infect .exe. .sys, .com, .dll, .pif files (most other files can't be launched thus are of no use for viruses).
There are specific ransomwares, that encrypt documents or images on disk.
There are ones that delete or corrupt files just for kick, but they are even more rare.
The most popular ones that are similar to ones you describe are trojans using double extensions : .jpg.exe or similar.

So your answer to my question is yes? If so, when I scan/remove those personal infected files, it's possible that those my files be removed. not?

 

[Layback Bear]

Here is the way I look at it.
1. Never under estimate the ability of the bad guys.
2. The bad guys can create a infection to do just about anything and attach it to just about anything.
3. Don't assume a infections is located in only one place in your system.
4. Some infection are wrote to only hold the back door of your computer open to let all their little buddies in to do their damage.
-----
Example:
I helped a fellow member a long time ago that had a picture infected. He chose several pictures for a screen saver to cycle every so many seconds. When it landed on that infected picture all kinds of bad things happened.

 

[cottonball]

khoshtipi,

When a computer is infected by malware, can that malware damage the non OS files or only damage the OS files?

Malware can damage all sorts of files, depending on how the malware operates. It can also infect the computer's Master Boot Record.

We have no specific information, so, we can only speculate.

On the computer with the issue, did the AntiVirus program detect an infection?

Do you have a report of what malware was found?

 

[benjy206]

Malware can be near anything it want's to be. It all depends on the person who makes it. Also these day's god knows what it can do: This might help you understand more Malware - Wikipedia, the free encyclopedia

 

[khoshtipi]

khoshtipi,

When a computer is infected by malware, can that malware damage the non OS files or only damage the OS files?

Malware can damage all sorts of files, depending on how the malware operates. It can also infect the computer's Master Boot Record.

We have no specific information, so, we can only speculate.

On the computer with the issue, did the AntiVirus program detect an infection?

Do you have a report of what malware was found?

yes some viruses.

So when my machine is infected and it's possible that my personal files are infected too, so, when I scan the machine and then remove infected files, maybe those my personal files which are infected dele. not?

 

[cottonball]

Can you provide a screenshot of the viruses found?

Screenshots and Files - Upload and Post in Seven Forums

 

[khoshtipi]

@cottonball:

Those malware found were in type of trojan and virus. I found them by my avira bootable disk which is not possible to picture them. Anyway, on that scan, Avira found 10 malware, so if I remove those malware maybe one of them be one of my personal files so it's possible to loss that, so isn't it better to before scanning, I back up my personal files to save them from removing by anti-malware in scanning time?

 

[cottonball]

It is difficult to remove something I cannot see.

To play it safe, let's download Dr.Web CureIt!
Scroll down to the bottom of the page to download the free version.
Save to the Desktop.

After the file downloads, temporarily disable your antivirus program and disconnect from the Internet.
The scan will go faster.
Info: How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs - Security Mini-Guides

Right-click the cureit.exe file

and select: Run as Administrator

At the Dr.Web CureIt console, License and Updates prompt, agree to participate, and select: Continue

At the San Mode prompt, click: Select objects for scanning

At the next prompt, Custom Scan, check all the items except:
Temporary files
System Restore points.

Next, press: Click to select files and folders
Under Browse, select the drives to scan making sure the drive containing the Operating System, normally C:, is selected. Also select any additional drives (not the CD/DVD drive). When done, click: OK

Reboot computer to Safe Mode (Tap F8 key before the Microsoft logo appears. Select Safe Mode from the options).

Back at Dr.Web, click: Start Scanning

Please do not run any other programs while the scan is in progress.
The time needed for a full scan depends on factors, such as system performance, available memory, running processes, number of drives and files, etc. Please be patient since it may take a while.

If a threat is detected, a screen similar to the following appears:

For each entry detected, click on the down arrow by Action, and select: Cure (or Ignore, if it is something you recognize)

For the program to apply the selection on the Action column, click: Neutralize

When the actions are applied, a message appears: All security threats were neutralized successfully!

Now, click on the green: Open Report
The report appears in Notepad, and is called: Cureit.log
Save the report to the Desktop.

Close Dr.Web Cureit

Restart the computer to allow the files in use to be acted upon during reboot.

After reboot, attach the Cureit.log, saved previously, in your reply.

Re-enable your antivirus program when done.